cloudflare-hyperdrive

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a comprehensive educational resource for Cloudflare Hyperdrive. It includes multiple templates for popular database drivers (pg, postgres.js, mysql2) and ORMs (Drizzle, Prisma), all demonstrating secure implementation patterns.
  • [SAFE]: Static analysis warnings regarding hardcoded connection strings in references/setup-guide.md are false positives. The detected string (postgres://user:password@host:5432/database) is a standard documentation placeholder used for instructional purposes.
  • [COMMAND_EXECUTION]: The skill includes bash scripts (scripts/check-versions.sh and templates/local-dev-setup.sh) designed to assist developers with local project configuration and dependency verification. These scripts perform routine operations such as checking package versions via npm list and creating local environment files (.env.local) using user input.
  • [DYNAMIC_EXECUTION]: Documentation within the skill (references/troubleshooting.md) explicitly instructs users on how to disable dynamic code generation (disableEval: true) in specific database drivers to comply with Cloudflare Workers' security constraints.
  • [INDIRECT_PROMPT_INJECTION]: While the skill templates ingest data from external databases, the documentation strongly emphasizes the use of parameterized queries and prepared statements to mitigate injection risks. The skill serves to educate users on building secure data pipelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 11:59 PM
Security Audit — agent-trust-hub — cloudflare-hyperdrive